Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File:                     0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier:          n35c31+Jd8ucINBapPjryvzdtirr4YBLT7uAYRa9QO0=
Subject key identifier:   CF:03:79:2C:9F:D1:AA:45:65:C9:85:37:8E:80:AF:3A:1B:3E:52:4C
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer:       /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial:       018FD977B6DC68D2DF335E27A0FBD375290A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number:          0CB8
Signing time:             Sun 02 Jun 2024 15:00:52 +0000
Manifest this update:     Sun 02 Jun 2024 15:00:52 +0000
Manifest next update:     Mon 03 Jun 2024 15:00:52 +0000
Files and hashes:         1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: rjEdpwaJp9Jp9Z7t3rN6U75Z6gsICwQXAzlo0Otdm+w=)
                          2: d_m5om9Eg6XvKdW7XeZIqn8-BLg.roa (hash: aV/wJa08dR1AdkBBTjInVUkIBkJKMxX+/vOd6B0pw8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d9:77:b6:dc:68:d2:df:33:5e:27:a0:fb:d3:75:29:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
        Validity
            Not Before: Jun  2 15:00:52 2024 GMT
            Not After : Jun  3 15:00:52 2024 GMT
        Subject: CN=cf03792c9fd1aa4565c985378e80af3a1b3e524c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d4:41:e6:fd:0f:79:3f:e5:ea:db:68:37:3e:
                    fa:6a:5f:b6:b1:de:d5:3c:ca:44:6f:46:39:24:02:
                    11:0a:a3:ee:9f:54:83:bf:1d:c0:51:c7:fb:db:91:
                    3c:8e:7f:ad:cf:bc:0e:f9:72:fd:46:fa:4f:d0:32:
                    91:96:5b:07:b0:08:78:82:27:60:0c:d6:5b:db:91:
                    94:e2:62:8c:46:92:b6:aa:f7:d0:53:03:6a:4e:97:
                    21:de:ec:85:a4:13:5a:be:33:e3:b3:10:9d:65:ce:
                    e2:9b:a5:70:9c:4b:31:78:50:b9:70:a6:a9:a2:99:
                    15:d8:bb:bf:04:f8:9e:86:21:6b:b4:16:61:9a:42:
                    a8:4b:d8:f4:67:b5:13:f6:d0:91:15:f1:7a:bd:50:
                    57:b0:d2:28:fd:f8:b3:34:e0:1a:c3:13:dd:5b:12:
                    66:c8:06:a5:02:96:a6:a6:e8:d7:47:c5:b6:5e:58:
                    60:49:d5:d9:45:6b:60:65:8b:70:65:d2:bc:fa:b4:
                    e4:91:ce:51:b2:cd:93:65:9b:be:95:78:80:ff:89:
                    76:9b:16:26:60:53:7d:ff:26:38:a7:f9:95:66:d1:
                    e7:38:5d:b5:cd:df:79:35:86:45:35:ac:02:00:7f:
                    14:7d:ff:83:20:57:72:e5:4f:76:cc:26:df:91:03:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:03:79:2C:9F:D1:AA:45:65:C9:85:37:8E:80:AF:3A:1B:3E:52:4C
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:a6:8c:17:f1:d6:78:24:49:58:13:1b:47:f8:74:b1:0a:
         3a:5b:8e:6f:4e:4f:06:f7:14:f4:56:d3:98:e9:e6:71:ac:c8:
         8a:d9:f8:1f:90:4d:47:0b:b3:a6:62:76:0f:4b:89:77:0d:8c:
         d8:99:60:55:cc:1d:76:86:9e:a2:ce:cc:55:1c:5c:92:98:1e:
         03:1f:7b:32:7d:0a:7a:9f:90:62:a6:61:e9:15:b3:75:59:9f:
         9b:84:7b:18:7f:cd:4a:20:b3:1a:19:40:5a:8c:9f:c3:ef:fc:
         26:83:45:78:91:55:5e:b7:ef:8e:96:38:21:0c:1b:7c:26:cb:
         6d:7a:b9:7b:e5:7c:4c:ba:f3:f3:8f:80:9d:fa:77:66:cf:4a:
         9b:ab:f5:e8:7d:05:82:79:10:c7:96:42:ad:5b:19:a8:5b:20:
         23:84:e6:74:f6:e2:ad:69:82:17:5e:2c:aa:f2:a3:2e:bc:7a:
         7f:47:f1:a4:51:6e:4b:7e:ca:b4:fa:af:ba:49:b7:9f:56:2e:
         ed:60:e3:eb:74:8f:6a:27:8a:12:b9:01:dc:90:a4:23:60:fd:
         5e:1b:cb:92:0b:46:a5:22:eb:89:40:1f:36:ec:b3:4f:37:4f:
         75:e9:8c:85:48:37:03:63:1b:70:ef:da:fd:c5:cf:92:39:1c:
         b2:f7:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:11:51 2024 by rpki-client on console-fra.rpki-client.org